Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/20570a30-2951-3964-8c53-b4274dd2eabe.roa
File: 20570a30-2951-3964-8c53-b4274dd2eabe.roa (raw, json)
Hash identifier: k7/3oxnYaGh4VMBQsGzsZ9QtqutV6QMySNQ/gx7KJ+c=
Subject key identifier: BE:C0:7B:B5:FA:5D:A5:27:33:32:DB:A3:EF:7B:A0:7F:EE:FF:2B:88
Certificate issuer: /CN=aabbabc3-cafd-46c0-b90e-e44d061ba2a3
Certificate serial: 010D0C9F43285848D6410CC5DCA4ABF05AE9BF80
Authority key identifier: 32:C7:97:1D:40:11:9A:A3:10:7D:7C:66:68:0F:11:BF:70:CC:0F:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/20570a30-2951-3964-8c53-b4274dd2eabe.roa
Signing time: Mon 10 Feb 2025 14:00:52 +0000
ROA not before: Mon 10 Feb 2025 14:00:52 +0000
ROA not after: Sun 11 May 2025 13:00:52 +0000
asID: 401155
IP address blocks: 2602:819:8000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:41:0c:c5:dc:a4:ab:f0:5a:e9:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aabbabc3-cafd-46c0-b90e-e44d061ba2a3
Validity
Not Before: Feb 10 14:00:52 2025 GMT
Not After : May 11 13:00:52 2025 GMT
Subject: CN=33c74c0f-52c7-4f64-8e32-81a6faad10f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f6:ee:4b:75:7a:d2:8b:22:0b:bc:19:92:32:
f4:e7:c7:f2:1c:ad:f4:72:d6:40:f3:40:0f:dd:4b:
5f:d3:b6:d9:6c:75:a4:3b:e5:2b:5f:f6:a2:61:c8:
25:a1:be:28:3f:43:e2:d1:3a:59:ed:6b:0c:91:da:
77:c9:8a:af:75:e5:56:c4:f1:a3:e5:e0:61:da:40:
c6:41:f3:fd:ad:39:d3:68:9c:6b:6c:7a:30:88:20:
31:ff:57:c2:e6:a9:c7:eb:09:e1:48:56:e4:b3:64:
3b:f8:8f:83:49:66:06:2e:cb:9f:dc:3e:2d:91:3f:
cf:2c:f5:19:86:4d:9a:2d:f1:51:0c:04:ad:16:a9:
5b:32:8a:b0:cc:94:b1:3e:71:35:1d:74:f9:9a:b3:
a3:44:f3:80:fa:82:80:54:b0:1a:af:ad:af:07:cc:
03:07:aa:64:43:8c:e6:25:f6:b5:55:e5:6a:47:83:
e8:72:f1:bd:9f:ce:f4:67:39:54:e3:48:86:20:78:
cf:c5:d4:c7:23:99:6b:b4:13:36:26:70:a1:75:aa:
36:76:a6:3b:c2:b8:97:28:b6:6d:d0:5e:01:8e:0d:
8a:d8:10:73:af:57:d1:00:cc:ab:e7:ad:eb:da:89:
1b:c0:f1:8d:4f:96:a5:fa:ce:5a:9e:90:08:77:fb:
26:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C0:7B:B5:FA:5D:A5:27:33:32:DB:A3:EF:7B:A0:7F:EE:FF:2B:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/20570a30-2951-3964-8c53-b4274dd2eabe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.crl
X509v3 Authority Key Identifier:
keyid:32:C7:97:1D:40:11:9A:A3:10:7D:7C:66:68:0F:11:BF:70:CC:0F:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:819:8000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:b7:9c:4e:cd:32:4b:39:0a:eb:0c:2c:4e:5a:25:8e:59:ff:
fa:b4:33:0b:6e:5f:2c:8d:d5:58:a8:32:05:92:fb:5f:61:51:
dd:50:9a:ed:82:88:a0:66:ee:db:6e:ca:11:fa:b0:40:34:45:
d0:65:f4:48:80:49:17:c1:99:47:cd:fd:bd:ea:4a:f6:e5:46:
bb:7c:cc:44:dd:52:f6:60:d5:91:aa:61:bf:7b:9b:53:b4:87:
68:1b:de:0a:21:e2:0b:98:ff:e8:a3:e9:b6:59:e4:97:85:09:
73:13:87:aa:4c:39:f9:18:69:8e:e8:6b:c3:f1:2d:cf:fe:e1:
a3:99:73:a7:04:1d:d3:08:57:0c:12:7c:d2:5b:6c:08:c9:41:
7f:5f:0c:fb:bf:7d:cc:ae:bf:a2:2b:b0:7d:56:59:4e:41:76:
82:a0:ac:e7:27:39:54:36:6d:29:15:7d:0e:cb:90:68:ba:23:
3f:e7:19:97:67:49:37:35:e5:c0:fa:a1:52:ca:96:1a:46:f0:
a3:6d:1d:61:4c:59:47:9f:08:00:6a:1f:03:d1:e4:95:56:4b:
bb:21:42:eb:a8:63:a1:e3:9c:8c:7b:c2:f2:4f:97:44:b3:66:
dc:48:96:60:43:cb:c5:4f:92:8a:e3:66:86:79:2c:53:03:6f:
89:7d:2e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:45:48 2025 by rpki-client